This question came from our site for professional and enthusiast programmers.

Sounds more like an admin question rather than a programming question. For a user logged in, use the Task Manager (CTRL-ALT-DEL will give you a menu that lets you choose this option)
–
winwaedJan 13 '11 at 16:05

it gives you so much more information than the default task manager, including a tree view of all the processes so you can see which processes launched other processes. You can look at pretty much every piece of data concerning a process, including associated registry key handles, open files, dlls. There’s even a search function.

Also see the Wikipedia page, Process Explorer.I always wonder why Microsoft has not yet replaced the default Task Manager with this yet.